Gap Questionnaire

• Overview
• Gap questionnaire benefits
• Send a gap questionnaire

Overview

Once you have uploaded and scanned all your available evidence, you may still have gaps and need information from the vendor to address them. You can request missing evidence by sending a gap questionnaire. A gap questionnaire is a dynamic questionnaire which:

• includes questions specific to the controls you have applied
• uses selected evidence to pre-fill relevant answers for the vendor (they can rewrite and override these)

Any controls marked as n/a are not included on gap questionnaires.

Gap questionnaire benefits

Gap questionnaires are

• Dynamic and only cover what you need to know. Gap questionnaires are automatically pared down to what you need to know. E.g. they only cover the controls a vendor is currently being evaluated against.
• Easier for the vendor to answer. Gap questionnaires are pre-filled (using evidence) for the vendor where possible.
• Instant updates. When your vendor submits a gap questionnaire, Security Profile is automatically updated based on their responses and identified risks (or checks passed).

Send a gap questionnaire

1. Click the Vendor Risk icon in UpGuard's left-hand navigation panel.
2. Ensure you're on the Vendors tab.
3. Select a vendor (or monitor a new vendor).
4. Select Security Profile from the expanded options under the vendor's name in the left-nav.
5. Click the Evidence tab.
6. Click Send gap questionnaire.
7. Click Next on the pop-up that appears.
8. Select an existing contact at the vendor's organization who will be able to fill out the gap questionnaire. Or + Add a new contact.
9. Click Next.
10. Use the date fields to Set a due date that the questionnaire should be completed by and (optionally) a reminder date.
11. Click Send questionnaire.

An email is immediately sent to the specified contact alerting them that they have a questionnaire to fill out. The “Send gap questionnaire” button will be disabled if a questionnaire has been sent out, but you can hover over the button and click “View details” to see information about the sent questionnaire. When the questionnaire is submitted, you’ll see a callout on the evidence tab and be able to review questionnaire responses.